Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/15fa3ffb33d65435e40b2a85ffb5a4b9517115cf.roa
File:                     15fa3ffb33d65435e40b2a85ffb5a4b9517115cf.roa (raw, json)
Hash identifier:          U+fQZD52fIbGyrjgwja4w8m20h9/b57H4q/8j6uxFTs=
Subject key identifier:   49:8F:53:5F:5C:D8:C4:69:71:BF:6F:F4:56:65:22:11:2C:37:6F:5B
Certificate issuer:       /CN=5e93dce6c9d960936b80c36849407f9ce44df6f8
Certificate serial:       0C0204
Authority key identifier: 1D:73:41:78:1B:BE:0E:E9:8C:07:63:19:FD:A5:81:CC:13:DE:66:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e93dce6c9d960936b80c36849407f9ce44df6f8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/15fa3ffb33d65435e40b2a85ffb5a4b9517115cf.roa
Signing time:             Wed 24 Mar 2021 14:42:20 +0000
ROA not before:           Wed 24 Mar 2021 14:42:20 +0000
ROA not after:            Tue 24 Mar 2026 14:42:20 +0000
asID:                     264773
IP address blocks:        45.183.4.0/24 maxlen: 24
                          45.183.5.0/24 maxlen: 24
                          45.183.6.0/24 maxlen: 24
                          45.183.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786948 (0xc0204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e93dce6c9d960936b80c36849407f9ce44df6f8
        Validity
            Not Before: Mar 24 14:42:20 2021 GMT
            Not After : Mar 24 14:42:20 2026 GMT
        Subject: CN=15fa3ffb33d65435e40b2a85ffb5a4b9517115cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:60:6c:f2:24:96:c3:32:e0:93:1b:17:55:
                    f7:9a:23:56:07:16:0c:45:a5:b2:a4:2a:f2:a7:1e:
                    4c:15:a9:be:b7:bf:ef:58:a6:e9:ee:8b:0b:2e:4a:
                    87:66:30:8c:8c:e3:31:68:73:c0:01:fe:9b:ea:cf:
                    42:de:36:ed:42:a5:d1:84:79:e4:63:04:d4:24:90:
                    97:7a:cb:57:3d:0e:96:df:5c:e0:8d:80:ba:9a:06:
                    1a:37:c2:09:c8:7a:73:fd:4a:aa:82:60:8c:cb:8a:
                    f1:ee:df:7b:47:ac:9e:f7:70:f7:ef:34:bd:e1:fd:
                    ab:39:33:7b:b8:58:b6:07:81:4d:09:f2:d4:29:02:
                    52:9a:be:aa:30:c1:76:e9:7d:b8:a0:f3:a2:67:c9:
                    2d:ca:f6:ac:98:ef:7c:ce:db:6f:00:02:a8:9b:e1:
                    c3:10:b7:a7:cf:81:17:ed:1c:0e:99:f0:3f:71:a2:
                    5a:6c:5c:13:80:d6:f8:7b:88:0b:1a:73:95:1e:a4:
                    a3:1a:4c:ad:10:a2:5f:3a:2b:ae:de:8e:3b:6c:e0:
                    10:30:6b:e2:ec:21:d9:da:50:6d:bc:2f:d7:a8:8e:
                    0d:a5:76:dc:43:79:ce:7e:ff:a4:28:28:f7:72:e3:
                    38:bf:9c:7f:36:9d:67:8c:70:57:c2:a7:9b:96:aa:
                    ac:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:53:5F:5C:D8:C4:69:71:BF:6F:F4:56:65:22:11:2C:37:6F:5B
            X509v3 Authority Key Identifier:
                keyid:1D:73:41:78:1B:BE:0E:E9:8C:07:63:19:FD:A5:81:CC:13:DE:66:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e93dce6c9d960936b80c36849407f9ce44df6f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/15fa3ffb33d65435e40b2a85ffb5a4b9517115cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05dda081-13db-431d-801c-85113c2ef9b2/5e93dce6c9d960936b80c36849407f9ce44df6f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:9b:f9:23:26:1e:cb:18:cf:25:a7:0b:8b:6d:9c:ca:60:
         14:84:6b:50:b3:13:23:b8:a1:20:02:18:35:f3:3a:a9:85:02:
         27:3f:82:5b:f5:ac:c2:ab:1f:7e:c7:53:6a:54:07:91:dc:8b:
         6a:75:ff:e2:af:ed:66:a9:4a:fb:d8:0f:27:f2:74:1c:c0:8e:
         6f:62:4d:9c:a1:3b:6b:5e:31:3d:e5:b2:52:4b:31:ce:9c:f6:
         b5:37:aa:f2:68:fc:77:79:f9:80:d7:34:47:bb:a4:14:a1:dd:
         a7:08:fe:c0:35:64:fd:48:b9:02:88:f1:72:c0:39:0a:80:b7:
         46:62:74:0a:d7:04:ab:cd:e6:99:8e:05:f6:f8:a3:f2:03:98:
         0d:2b:d9:7a:31:05:54:15:d6:bd:e9:ed:31:82:10:b9:40:84:
         15:29:87:b6:5f:41:a2:8e:c5:b3:f4:a2:13:0f:a9:b4:e5:cf:
         85:b5:2a:dd:af:5a:57:4c:2a:e0:cb:b5:62:2c:47:09:c8:f0:
         13:98:e6:5a:f6:04:77:4b:42:17:a2:68:a7:4a:e0:7c:dd:a7:
         ab:3c:7c:d3:67:e1:2f:6b:87:0e:21:f0:91:cf:f9:96:b9:bf:
         3f:f3:1b:57:3a:94:7a:88:b6:78:53:eb:75:3f:32:28:98:aa:
         d9:7b:71:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:23 2023 by rpki-client on console-ams.rpki-client.org